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DETAILED ACTION 

1. Claims 1-22 have been examined and are pending. 

Claim Rejections - 35 USC §102 
The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

2. Claiml-4, 6-8, 10-16, 18-20 and 22 are rejected under 35 U.S.C. 102(e) as being 
substantially anticipated by US 6,823,454 to Hind et al. (hereinafter "Hind"). 

As per claim 1, Hind teaches a user terminal capable of communicating with a wireless 
access network, the user terminal comprising (Fig. 2 'and associated text): 

a memory to store an identity certificate signed by a certificate authority (Fig. 4 and 
associated text, col. 12, line 62 through col. 13, line 12, where storing the private key associated 
with the device certificate in non-removable protected storage attached to the device) to be used 
by an access point (server device 450) of the wireless access network to authenticate the user 
terminal ( client device 400), the identity certificate being based, at least in part, on hardware 
included in the user terminal ( col. 10, lines 8-25, taught the device certificate using a globally- 
unique identifier for a particular device, see also, col. 3, lines 58-61) 

As per claims 2 and 3, Hind teaches the user terminal of claim 1, wherein the identity 
certificate includes a serial number of the user terminal wherein the serial number comprises a 
Media Access Control (MAC) address of the user terminal (col. 1 1, lines 46-54 and col. 6, lines 
29-32, see also Fig. IB and associated text).. 



Application/Control Number: 10/687,675 Page 3 

Art Unit: 2131 

As per claim 4, Hind teaches the user terminal of claim 1, wherein the identity certificate 
is factory seeded into the memory of the user terminal (col. 10, lines 8-25, where creating device 
certificate using globally -unique device identifier for a particular device and storing the private 
key associated with the device certificate for a device in a non-removable protected storage 
attached to the physical device are taught) 

As per claim 6, Hind teaches a method comprising: 

authenticating a user terminal of a wireless access network by an access point of the 
wireless access network using an identity certificate signed by a certificate authority, the identity 
certificate being bound to user terminal hardware (col. 10, lines 8-25, taught the device 
certificate using a globally-unique identifier for a particular device, see also, col. 3, lines 58-61). 

As per claims 7 and 8, Hind teaches the method of claim 6, wherein the identity 
certificate being bound to user terminal hardware comprises the identity certificate including a 
serial number of the user terminal, wherein the serial number comprises a Media Access Control 
(MAC) address of the user terminal (col. 11, lines 46-54 and col. 6, lines 29-32, see also Fig. IB 
and associated text). 

As per claim 10, Hind teaches the method of claim 6, wherein the identity certificate is 
factory seeded into the user terminal (col. 10, lines 8-25, where creating device certificate using 
globally -unique device identifier for a particular device and storing the private key associated 
with the device certificate for a device in a non-removable protected storage attached to the 
physical device are taught). 
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As per claim 11, Hind teaches an access point of a wireless access network, the access 
point comprising: 

a receiver to receive an authenticator message from a user terminal capable of 
communicating with the wireless access network that is requesting access, the authenticator 
message including an identity certificate of the user terminal signed by a certificate authority 
(col. 11, lines 1-15, fig. 3 and associated text discloses the format of a representative digital 
certificate) , the identity certificate being bound to user terminal hardware (Fig. 3, the unique 
device identifier stored in the subject field of the certificate); and 

a processor coupled to the receiver to authenticate the user terminal using the identity 
certificate (col. 11, lines 46-55, where the serial number or other identifier of a radio module 
stored in a device certificate is used to authenticate the device using public key cryptography). 

As per claims 12 and 13, Hind teaches the access point of claim 11, wherein the identity 
certificate being bound to user terminal hardware comprises the identity certificate including a 
serial number of the user terminal, wherein the serial number comprises a Media Access Control 
(MAC) address of the user terminal (col. 11, lines 46-54 and col. 6, lines 29-32, see also Fig. IB 
and associated text). 

As per claim 14, Hind teaches the access point of claim 11, wherein the identity 
certificate is factory seeded into the user terminal (col. 10, lines 8-25, where creating device 
certificate using globally -unique device identifier for a particular device and storing the private 
key associated with the device certificate for a device in a non-removable protected storage 
attached to the physical device are taught). 
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As per claim 15, Hind teaches a digital certificate to be seeded into a user terminal 
capable of communicating with , a wireless access network, the certificate comprising: 

a serial number of the user terminal; an identification of a certificate authority that signs 
the certificate; and a signature of the identified certificate authority (fig. 3 and associated text, 
col. 1 1, lines 1-16 discloses the format of a representative digital certificate where the certificate 
has number of fields including device identifier, the identifier of the creator (issuer), and the a 
digital certificate of the certificate signature). 

As per claim 16, Hind teaches the certificate of claim 15, wherein the serial number 
comprises a Media Access Control (MAC) address of the user terminal (col. 11, lines 46-54 and 
col. 6, lines 29-32, see also Fig. IB and associated text). 

Claims 18-20 and 22 are machine-readable medium having instructions stored thereon, 
when executed by a processor performs the steps of claims 6-8 and 10. Claims 18-20 are rejected 
for the same reasons provided in the rejections of claims 6-8 and 10 above. 

Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 1 02 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

3. Claim claims 5, 9, 17 and 21 rejected under 35 U.S.C. 103(a) as being unpatentable over 
Hind as applied to claims 1, 6, 15 and 18 above, and further in view of US 2004/0005878 to Olin 
et al. (hereinafter "Olin"). 
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Hind does not teach wherein the identity certificate authenticates the user terminal to 
multiple wireless access networks and/or authenticating the user by an access point of a second 
wireless access network using the identity certificate. 

However, in an analogous art, Olin teaches an access point for mobile devices with 
wireless communication capacity comprising communication means for establishing 
communications with at least one or more access points in order to form a network between at 
least access points (Abstract). 

Olin teaches (paragraph 0041) teaches when a user of mobile device wants to connect to 
an access point, the identity of the user has first to be authenticated and that (paragraphs 0035- 
0036, Fig 1 and associated text) a mobile device connect to one of the access points with any 
type of wireless connection and that the mobile device connects to the first access point using 
wireless LAN. Then, the access point establishes a path to a gateway by tunneling using 
authorization protocols, such as certificates and digital signatures. 

Therefore, it would have been obvious to one of ordinary skill in the art to modify the 
method and system of Hind with the teachings of Olin to allow authenticating the user of mobile 
device to multiple access points in order to form a private network and to enable mobile devices 
to establish connection to a gateway directly from one access point or indirectly through other 
access points of the access point network ( paragraph 0009). 

Conclusion 

4. Prior arts made of record, not relied upon: 
See the enclosed PTO-892. 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Taghi T. Arani whose telephone number is (571) 272-3787. The 
examiner can normally be reached on 8:00-5:30 Mon-Fri. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (571) 272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217^97 (toll-free). 
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